DNSSEC Debugger - uscapitolgiftshop.gov

Domain Name:

Time: 2024-05-18 08:39:26 UTC

Analyzing DNSSEC problems for uscapitolgiftshop.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 39358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to a.root-servers.net for uscapitolgiftshop.gov/A
	Received 628 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 628 octets ;; HEADER SECTION ;; id = 59954 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; ADDITIONAL SECTION (9 records) c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for gov/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 610 octets ;; HEADER SECTION ;; id = 58332 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 b.ns.gov. 172800 IN A 199.33.231.1 c.ns.gov. 172800 IN A 199.33.232.1 d.ns.gov. 172800 IN A 199.33.233.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to i.root-servers.net for gov/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 41355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . QTciWaVih2CPxxicfKXmgSLAMXabblA0KKaazL5SPLtCEWBVl2bMznOMAvVAReQyFhmh323ve5wL qJieU/3OhK/yPnM9dZgZFBNUQXghBjVgJ77esOp4sfvrIvGFXLqKIcIqH5K/5shPGVjJLG55kHwD bMUufP8kL+TqzkG8C5hoq8y/3kpWa6oDc/TW3VY3vOzAVx/Nh2o9zYnF98QY03bMLoI+CJATLqJA R+aeFeBxouEqYE3UYZXRC5vir8lSP/DtXrUsAfL75M5dTJia/DLGhwLfmKQXwyK+qlZdiM/rtyfF kiOgKAPnEYkDrtrkFGOFgb5lPZQegV9Xm8+xvg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to d.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 779 octets ;; HEADER SECTION ;; id = 40307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to d.ns.gov for uscapitolgiftshop.gov/A
	Received 512 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 512 octets ;; HEADER SECTION ;; id = 2183 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) uscapitolgiftshop.gov. 10800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 10800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 10800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 10800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 10800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 10800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 1 6c87c27d24c00332c5cf4bcb9f9c3a8f6357ea01 ) uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 2 4ae6a65831f4cb013c24443274cc9a019e65f6ef5674db58018213267dc7436d ) uscapitolgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519093927 20240517073927 10104 gov. PI934AQUkc9fcGkVyGYncGB6fHJieI9/mb3cXft3+BZjZAW+1siiQk5xlQ/KpcFjJPYPiMwXDyoU eOKUozERJqPFXjnTfvwUpeC0Qndm8+sIso+zx2aLPdzupSk2rNPiuKR6o8yUmOVk/1CbNEMt47a3 ECC2p4De1VptZKp7+S8SXghhFiq5ZAiYH6cJKjZxDLnwwcSfETcU2tqdLwI11Q== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 ;; { "EDNS-VERSION": 0 }
	Query to a.ns.gov for uscapitolgiftshop.gov/DNSKEY
	Received 512 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 512 octets ;; HEADER SECTION ;; id = 47458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) uscapitolgiftshop.gov. 10800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 10800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 10800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 10800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 10800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 10800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 1 6c87c27d24c00332c5cf4bcb9f9c3a8f6357ea01 ) uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 2 4ae6a65831f4cb013c24443274cc9a019e65f6ef5674db58018213267dc7436d ) uscapitolgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519093927 20240517073927 10104 gov. PI934AQUkc9fcGkVyGYncGB6fHJieI9/mb3cXft3+BZjZAW+1siiQk5xlQ/KpcFjJPYPiMwXDyoU eOKUozERJqPFXjnTfvwUpeC0Qndm8+sIso+zx2aLPdzupSk2rNPiuKR6o8yUmOVk/1CbNEMt47a3 ECC2p4De1VptZKp7+S8SXghhFiq5ZAiYH6cJKjZxDLnwwcSfETcU2tqdLwI11Q== ) ;; ADDITIONAL SECTION (3 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 ;; { "EDNS-VERSION": 0 }
	Found child zone uscapitolgiftshop.gov

uscapitolgiftshop.gov

	Checking DS between gov and uscapitolgiftshop.gov
	Query to a.ns.gov for uscapitolgiftshop.gov/DS
	Received 329 bytes from 199.33.230.1
	;; Response received from [199.33.230.1] 329 octets ;; HEADER SECTION ;; id = 33904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN DS ;; ANSWER SECTION (3 records) uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 1 6c87c27d24c00332c5cf4bcb9f9c3a8f6357ea01 ) uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 2 4ae6a65831f4cb013c24443274cc9a019e65f6ef5674db58018213267dc7436d ) uscapitolgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519093927 20240517073927 10104 gov. PI934AQUkc9fcGkVyGYncGB6fHJieI9/mb3cXft3+BZjZAW+1siiQk5xlQ/KpcFjJPYPiMwXDyoU eOKUozERJqPFXjnTfvwUpeC0Qndm8+sIso+zx2aLPdzupSk2rNPiuKR6o8yUmOVk/1CbNEMt47a3 ECC2p4De1VptZKp7+S8SXghhFiq5ZAiYH6cJKjZxDLnwwcSfETcU2tqdLwI11Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for uscapitolgiftshop.gov in the gov zone
	DS=25207/SHA-1 uses a deprecated digest algorithm
	DS=25207/SHA-1 has algorithm RSASHA256
	DS=25207/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uscapitolgiftshop.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519093927 20240517073927 10104 gov. PI934AQUkc9fcGkVyGYncGB6fHJieI9/mb3cXft3+BZjZAW+1siiQk5xlQ/KpcFjJPYPiMwXDyoU eOKUozERJqPFXjnTfvwUpeC0Qndm8+sIso+zx2aLPdzupSk2rNPiuKR6o8yUmOVk/1CbNEMt47a3 ECC2p4De1VptZKp7+S8SXghhFiq5ZAiYH6cJKjZxDLnwwcSfETcU2tqdLwI11Q== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=25207/SHA-1 is now in the chain-of-trust
	`uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 1 6c87c27d24c00332c5cf4bcb9f9c3a8f6357ea01 )`
	`uscapitolgiftshop.gov. 3600 IN DS ( 25207 8 2 4ae6a65831f4cb013c24443274cc9a019e65f6ef5674db58018213267dc7436d )`
	Query to ns2.aoc.gov for uscapitolgiftshop.gov/DNSKEY
	Received 1845 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 1845 octets ;; HEADER SECTION ;; id = 3216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN DNSKEY ;; ANSWER SECTION (8 records) uscapitolgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAavc9WvpjEK0Vl8ieHJoBM/aUrkZQVq/0Tcolzh9X0o3ju5yP1F0kb1kG3PDmfGgD0HIxRby mvH7rV6OdktQtWoxuYjrtZww2/rOwNF57AKZZWY7fPV7Ru0aTNUqAqxufX9NOwKFdsgKR1bWHhg8 Jyur1PaforZqycDN6mU35IKB ) ; Key ID = 40675 uscapitolgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAd2UU8hZghIznmVofDf4CFbXBHjGIqxZJTI1ipFTrbhmM6qeuFtZqUNLYPZnCJWob4QAw6Tu eYlXIE5bYh7p5Mhc73mLeNaPW32fwwRDH3DAxQT4Ljc97drq1tRGz0oeghiyr3H6/eewkTxtzOWY VmFHED3HQRk+Rkca6xzkUr7v ) ; Key ID = 43608 uscapitolgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAejowyt6abGjy/27UQ/rMJjFTHqp4eaqPTTElugu/zuT5kMotY+PizgsB4TZ46AjNF4ujhFR Gg5owGNpJHexapPs79P9ONdVA790GfnnpHuRuIrQeqj2mgkaqX9AI0JFYu3R2L5IokCGWWd5VrJ/ XQRQgkomUS9UYbiojOwUF++vjh1eAylTDhatQFELcC1vJEiEhcnjAlAWJnuYQmxshAAdpcvIOFO1 rgOMbFaV7OgJwBWsaIhbtNNRG4DhaYcJs+zQ2WSLT5s2G+kwdG5YojJosMt8EwLRxe6FDUGsIvEu 6U0fPaUhZTBMs5Hyg5MCXfY2iNDjHtqRsMGsYzBJfYE= ) ; Key ID = 6310 uscapitolgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAekHbA0fgUNc9kmkvMiFS+jgZh++Ij73r7sHAuciggqjyVQ1DS8mPvNmj594Fx6d85snN1T5 lM0r5WQANGf8081rnqhZ97zuKyCT/EDy3fRxpoDgT35JeAklQHgHvpvq+Zi2B5SaJaJwFT5ssIyX oe78rY+HYnNINUhYkMTBFMhnBFu/6IL7YCkIeQC5cmpjknuVg5ArpKFj0+ma+iYVSEf4jNQn3F0b Z+caml7wymy3Ut+gbAPe9KJjuFvp116yg7lrh4gyqZhcYGInXFUeaFLi8BJCMD5G7pdr4OfV+WKf fwlcURep3nbuHNytmKsP3RxpTe68GI7NfnMd+bcbXv8= ) ; Key ID = 25207 uscapitolgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAccdrehgF+Mp3ZKts2BULCxAFvqHJhpTou6yAVYKIk2AYL1WVlDS1jSzGaWF365MfakSsBRf sa4BelD9tHZpJynW0GRmmCXaDQWzxLoGWF6LhObqEaj9+iL3a1xVjrtsYKsfJtFT62gAsdzeaiqX rg+Enoo6wy+53omWsCme41d9 ) ; Key ID = 41725 uscapitolgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522011150 20240518005916 6310 uscapitolgiftshop.gov. Gnd8iRaXEjJ4yfiiTC8wW2D7O0KdTpsJgpDVkRMgmImb4neqA36qu8o3QtG64uvK8ZrEe5yPiUIU oF9iGbJOO2TV4MJcC32MYpouT6l5c3XcPGh7BvE8uzvPDrYNpbnUFy3NEkKLIPbXPD4dZp3lPbwG BVro2TmJQ4kyOlxSUcqHMA5L9oZvIPMXGR5Mv6b63z+d1LMgwyZGMY3VwPigLdbDJBz+xaan8vmz JD5ZE93ZHXjdXg6BQCYxT9RMoFt+pqgLOJ6+hSyUwb9D9Aucph9PTMrEycevKZP9q34btJm4AH2z lh682zP4LohBhCXMt26mkDE9ycsl3x/KC62WmA== ) uscapitolgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522011150 20240518005916 25207 uscapitolgiftshop.gov. IR59MygjfqoUtRrPRQHwm/YiMZV+HySSkt1tCGJXvLH1fcJKtuFcK1vq6v0eiKOJJg+qaGDifiLY CKhwCzUBfsWbXnCMdHUKg+NPFWJUXlHOCykD69mtbmdELljfjsDP+emmzeG6/mUNu+BONSvLZHOC O+hPONu/nVfqSTZkaNosskulVsySSDstsQPwIfZwUeEEVnkCG8RR3KY3AR4gwEcbK6bJJbl9cvSJ FSmrfDZJ57JneUXKmJUP0fqxmD0fnaSRudQgPIPhTdQFrtrqdfQ6UO/fHw/SkuK+SUuAVbmu9p4c oAVrRdFJRgJWkqbSf1Fw43yX02UHiwf5rIkb+w== ) uscapitolgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. fsGliZrpT/rZJJV6KpiWLN34lDSopZm5VeUDkWB/HkIN8LfxvEaxS0TM9iwROwjJAniZgwcKiile +Cja16PXM7M4WRnrncirIYYTbO5bXLOGQHEohGdNcj7iLcNDomaQDo7AdHVvx9s5goNXJ0MOF9rd OT/LY35n8s4TCZomDlc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for uscapitolgiftshop.gov
	`uscapitolgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAavc9WvpjEK0Vl8ieHJoBM/aUrkZQVq/0Tcolzh9X0o3ju5yP1F0kb1kG3PDmfGgD0HIxRby mvH7rV6OdktQtWoxuYjrtZww2/rOwNF57AKZZWY7fPV7Ru0aTNUqAqxufX9NOwKFdsgKR1bWHhg8 Jyur1PaforZqycDN6mU35IKB ) ; Key ID = 40675`
	`uscapitolgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAd2UU8hZghIznmVofDf4CFbXBHjGIqxZJTI1ipFTrbhmM6qeuFtZqUNLYPZnCJWob4QAw6Tu eYlXIE5bYh7p5Mhc73mLeNaPW32fwwRDH3DAxQT4Ljc97drq1tRGz0oeghiyr3H6/eewkTxtzOWY VmFHED3HQRk+Rkca6xzkUr7v ) ; Key ID = 43608`
	`uscapitolgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAejowyt6abGjy/27UQ/rMJjFTHqp4eaqPTTElugu/zuT5kMotY+PizgsB4TZ46AjNF4ujhFR Gg5owGNpJHexapPs79P9ONdVA790GfnnpHuRuIrQeqj2mgkaqX9AI0JFYu3R2L5IokCGWWd5VrJ/ XQRQgkomUS9UYbiojOwUF++vjh1eAylTDhatQFELcC1vJEiEhcnjAlAWJnuYQmxshAAdpcvIOFO1 rgOMbFaV7OgJwBWsaIhbtNNRG4DhaYcJs+zQ2WSLT5s2G+kwdG5YojJosMt8EwLRxe6FDUGsIvEu 6U0fPaUhZTBMs5Hyg5MCXfY2iNDjHtqRsMGsYzBJfYE= ) ; Key ID = 6310`
	`uscapitolgiftshop.gov. 172800 IN DNSKEY ( 257 3 8 AwEAAekHbA0fgUNc9kmkvMiFS+jgZh++Ij73r7sHAuciggqjyVQ1DS8mPvNmj594Fx6d85snN1T5 lM0r5WQANGf8081rnqhZ97zuKyCT/EDy3fRxpoDgT35JeAklQHgHvpvq+Zi2B5SaJaJwFT5ssIyX oe78rY+HYnNINUhYkMTBFMhnBFu/6IL7YCkIeQC5cmpjknuVg5ArpKFj0+ma+iYVSEf4jNQn3F0b Z+caml7wymy3Ut+gbAPe9KJjuFvp116yg7lrh4gyqZhcYGInXFUeaFLi8BJCMD5G7pdr4OfV+WKf fwlcURep3nbuHNytmKsP3RxpTe68GI7NfnMd+bcbXv8= ) ; Key ID = 25207`
	`uscapitolgiftshop.gov. 172800 IN DNSKEY ( 256 3 8 AwEAAccdrehgF+Mp3ZKts2BULCxAFvqHJhpTou6yAVYKIk2AYL1WVlDS1jSzGaWF365MfakSsBRf sa4BelD9tHZpJynW0GRmmCXaDQWzxLoGWF6LhObqEaj9+iL3a1xVjrtsYKsfJtFT62gAsdzeaiqX rg+Enoo6wy+53omWsCme41d9 ) ; Key ID = 41725`
	DNSKEY=25207/SEP is now in the chain-of-trust
	DS=25207/SHA-1 verifies DNSKEY=25207/SEP
	DS=25207/SHA-256 verifies DNSKEY=25207/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`uscapitolgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522011150 20240518005916 6310 uscapitolgiftshop.gov. Gnd8iRaXEjJ4yfiiTC8wW2D7O0KdTpsJgpDVkRMgmImb4neqA36qu8o3QtG64uvK8ZrEe5yPiUIU oF9iGbJOO2TV4MJcC32MYpouT6l5c3XcPGh7BvE8uzvPDrYNpbnUFy3NEkKLIPbXPD4dZp3lPbwG BVro2TmJQ4kyOlxSUcqHMA5L9oZvIPMXGR5Mv6b63z+d1LMgwyZGMY3VwPigLdbDJBz+xaan8vmz JD5ZE93ZHXjdXg6BQCYxT9RMoFt+pqgLOJ6+hSyUwb9D9Aucph9PTMrEycevKZP9q34btJm4AH2z lh682zP4LohBhCXMt26mkDE9ycsl3x/KC62WmA== )`
	`uscapitolgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522011150 20240518005916 25207 uscapitolgiftshop.gov. IR59MygjfqoUtRrPRQHwm/YiMZV+HySSkt1tCGJXvLH1fcJKtuFcK1vq6v0eiKOJJg+qaGDifiLY CKhwCzUBfsWbXnCMdHUKg+NPFWJUXlHOCykD69mtbmdELljfjsDP+emmzeG6/mUNu+BONSvLZHOC O+hPONu/nVfqSTZkaNosskulVsySSDstsQPwIfZwUeEEVnkCG8RR3KY3AR4gwEcbK6bJJbl9cvSJ FSmrfDZJ57JneUXKmJUP0fqxmD0fnaSRudQgPIPhTdQFrtrqdfQ6UO/fHw/SkuK+SUuAVbmu9p4c oAVrRdFJRgJWkqbSf1Fw43yX02UHiwf5rIkb+w== )`
	`uscapitolgiftshop.gov. 172800 IN RRSIG ( DNSKEY 8 2 172800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. fsGliZrpT/rZJJV6KpiWLN34lDSopZm5VeUDkWB/HkIN8LfxvEaxS0TM9iwROwjJAniZgwcKiile +Cja16PXM7M4WRnrncirIYYTbO5bXLOGQHEohGdNcj7iLcNDomaQDo7AdHVvx9s5goNXJ0MOF9rd OT/LY35n8s4TCZomDlc= )`
	RRSIG=6310 and DNSKEY=6310/SEP verifies the DNSKEY RRset
	RRSIG=25207 and DNSKEY=25207/SEP verifies the DNSKEY RRset
	RRSIG=40675 and DNSKEY=40675 verifies the DNSKEY RRset
	DNSKEY=40675 is now in the chain-of-trust
	DNSKEY=43608 is now in the chain-of-trust
	DNSKEY=6310/SEP is now in the chain-of-trust
	DNSKEY=41725 is now in the chain-of-trust
	Query to ns3.comcastbusiness.net for uscapitolgiftshop.gov/A
	Received 247 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 247 octets ;; HEADER SECTION ;; id = 20842 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.comcastbusiness.net is authoritative for uscapitolgiftshop.gov
	Found RRSIG signed by uscapitolgiftshop.gov zone
	Query to ns2.aoc.gov for uscapitolgiftshop.gov/SOA
	Received 289 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 289 octets ;; HEADER SECTION ;; id = 28909 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2663 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) uscapitolgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240522015916 20240518005916 40675 uscapitolgiftshop.gov. SpQlrcbiohuv4Bfz3Lf6QvxLZiBLrWScM/ZHh60VrmCs/xh2TXM0HEY0wotrmVdY3CyrOS3qU/kC wdwq2Nae6LNMEf3+dAuICN9+ywn6spzDw8qFLdLsp2Jna9cw3dWQbk5JoO3GkF54h/SS6x5rs0bv 6PWWBEDzqX/H/MBJngw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.comcastbusiness.net for uscapitolgiftshop.gov/SOA
	Received 286 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 286 octets ;; HEADER SECTION ;; id = 23956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2663 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) uscapitolgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240522015916 20240518005916 40675 uscapitolgiftshop.gov. SpQlrcbiohuv4Bfz3Lf6QvxLZiBLrWScM/ZHh60VrmCs/xh2TXM0HEY0wotrmVdY3CyrOS3qU/kC wdwq2Nae6LNMEf3+dAuICN9+ywn6spzDw8qFLdLsp2Jna9cw3dWQbk5JoO3GkF54h/SS6x5rs0bv 6PWWBEDzqX/H/MBJngw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to authns1.centurylink.net for uscapitolgiftshop.gov/SOA
	Received 1064 bytes from 63.150.72.4
	;; Response received from [63.150.72.4] 1064 octets ;; HEADER SECTION ;; id = 8006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2663 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) uscapitolgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240522015916 20240518005916 40675 uscapitolgiftshop.gov. SpQlrcbiohuv4Bfz3Lf6QvxLZiBLrWScM/ZHh60VrmCs/xh2TXM0HEY0wotrmVdY3CyrOS3qU/kC wdwq2Nae6LNMEf3+dAuICN9+ywn6spzDw8qFLdLsp2Jna9cw3dWQbk5JoO3GkF54h/SS6x5rs0bv 6PWWBEDzqX/H/MBJngw= ) ;; AUTHORITY SECTION (7 records) uscapitolgiftshop.gov. 28800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. gnLuPZ83eC/rlFOM9/fe/CF+kWJl06/z79QEcegcEY3MFKpRpGkKsjMBoxmRFQRAtrE92V7bzbpJ y9zQGj1w4XQjF5Cc9AB1sLDavlXSzi8GAup08XKa98X0R5/ri+lI3FvnXi5GzMp+2Ea+q74asACq rDf5XjWvUa4Q0yZf6CM= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.aoc.gov for uscapitolgiftshop.gov/SOA
	Received 289 bytes from 161.197.102.14
	;; Response received from [161.197.102.14] 289 octets ;; HEADER SECTION ;; id = 29391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2663 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) uscapitolgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240522015916 20240518005916 40675 uscapitolgiftshop.gov. SpQlrcbiohuv4Bfz3Lf6QvxLZiBLrWScM/ZHh60VrmCs/xh2TXM0HEY0wotrmVdY3CyrOS3qU/kC wdwq2Nae6LNMEf3+dAuICN9+ywn6spzDw8qFLdLsp2Jna9cw3dWQbk5JoO3GkF54h/SS6x5rs0bv 6PWWBEDzqX/H/MBJngw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to authns2.centurylink.net for uscapitolgiftshop.gov/SOA
	Received 1064 bytes from 208.44.130.120
	;; Response received from [208.44.130.120] 1064 octets ;; HEADER SECTION ;; id = 62746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN SOA ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN SOA ( ns1.aoc.gov. hostmaster.aoc.gov. 2663 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 900 ;minimum ) uscapitolgiftshop.gov. 28800 IN RRSIG ( SOA 8 2 28800 20240522015916 20240518005916 40675 uscapitolgiftshop.gov. SpQlrcbiohuv4Bfz3Lf6QvxLZiBLrWScM/ZHh60VrmCs/xh2TXM0HEY0wotrmVdY3CyrOS3qU/kC wdwq2Nae6LNMEf3+dAuICN9+ywn6spzDw8qFLdLsp2Jna9cw3dWQbk5JoO3GkF54h/SS6x5rs0bv 6PWWBEDzqX/H/MBJngw= ) ;; AUTHORITY SECTION (7 records) uscapitolgiftshop.gov. 28800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. gnLuPZ83eC/rlFOM9/fe/CF+kWJl06/z79QEcegcEY3MFKpRpGkKsjMBoxmRFQRAtrE92V7bzbpJ y9zQGj1w4XQjF5Cc9AB1sLDavlXSzi8GAup08XKa98X0R5/ri+lI3FvnXi5GzMp+2Ea+q74asACq rDf5XjWvUa4Q0yZf6CM= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.comcastbusiness.net for uscapitolgiftshop.gov/A
	Received 247 bytes from 68.87.76.228
	;; Response received from [68.87.76.228] 247 octets ;; HEADER SECTION ;; id = 50535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uscapitolgiftshop.gov A RR has value 65.52.25.125
	Found 1 RRSIGs over A RRset
	`uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= )`
	RRSIG=40675 and DNSKEY=40675 verifies the A RRset

uscapitolgiftshop.gov

	Query to authns2.centurylink.net for uscapitolgiftshop.gov/A
	Received 1033 bytes from 208.44.130.120
	;; Response received from [208.44.130.120] 1033 octets ;; HEADER SECTION ;; id = 41054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (7 records) uscapitolgiftshop.gov. 28800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. gnLuPZ83eC/rlFOM9/fe/CF+kWJl06/z79QEcegcEY3MFKpRpGkKsjMBoxmRFQRAtrE92V7bzbpJ y9zQGj1w4XQjF5Cc9AB1sLDavlXSzi8GAup08XKa98X0R5/ri+lI3FvnXi5GzMp+2Ea+q74asACq rDf5XjWvUa4Q0yZf6CM= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	authns2.centurylink.net is authoritative for uscapitolgiftshop.gov
	Found RRSIG signed by uscapitolgiftshop.gov zone
	Query to authns2.centurylink.net for uscapitolgiftshop.gov/A
	Received 1033 bytes from 208.44.130.120
	;; Response received from [208.44.130.120] 1033 octets ;; HEADER SECTION ;; id = 7942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (7 records) uscapitolgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. gnLuPZ83eC/rlFOM9/fe/CF+kWJl06/z79QEcegcEY3MFKpRpGkKsjMBoxmRFQRAtrE92V7bzbpJ y9zQGj1w4XQjF5Cc9AB1sLDavlXSzi8GAup08XKa98X0R5/ri+lI3FvnXi5GzMp+2Ea+q74asACq rDf5XjWvUa4Q0yZf6CM= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	uscapitolgiftshop.gov A RR has value 65.52.25.125
	Found 1 RRSIGs over A RRset
	`uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= )`
	RRSIG=40675 and DNSKEY=40675 verifies the A RRset

uscapitolgiftshop.gov

	Query to ns1.aoc.gov for uscapitolgiftshop.gov/A
	Received 247 bytes from 161.197.102.14
	;; Response received from [161.197.102.14] 247 octets ;; HEADER SECTION ;; id = 24322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.aoc.gov is authoritative for uscapitolgiftshop.gov
	Found RRSIG signed by uscapitolgiftshop.gov zone
	Query to ns1.aoc.gov for uscapitolgiftshop.gov/A
	Received 247 bytes from 161.197.102.14
	;; Response received from [161.197.102.14] 247 octets ;; HEADER SECTION ;; id = 59330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uscapitolgiftshop.gov A RR has value 65.52.25.125
	Found 1 RRSIGs over A RRset
	`uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= )`
	RRSIG=40675 and DNSKEY=40675 verifies the A RRset

uscapitolgiftshop.gov

	Query to authns1.centurylink.net for uscapitolgiftshop.gov/A
	Received 1033 bytes from 63.150.72.4
	;; Response received from [63.150.72.4] 1033 octets ;; HEADER SECTION ;; id = 54071 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (7 records) uscapitolgiftshop.gov. 28800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. gnLuPZ83eC/rlFOM9/fe/CF+kWJl06/z79QEcegcEY3MFKpRpGkKsjMBoxmRFQRAtrE92V7bzbpJ y9zQGj1w4XQjF5Cc9AB1sLDavlXSzi8GAup08XKa98X0R5/ri+lI3FvnXi5GzMp+2Ea+q74asACq rDf5XjWvUa4Q0yZf6CM= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	authns1.centurylink.net is authoritative for uscapitolgiftshop.gov
	Found RRSIG signed by uscapitolgiftshop.gov zone
	Query to authns1.centurylink.net for uscapitolgiftshop.gov/A
	Received 1033 bytes from 63.150.72.4
	;; Response received from [63.150.72.4] 1033 octets ;; HEADER SECTION ;; id = 46546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (7 records) uscapitolgiftshop.gov. 28800 IN NS ns3.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns1.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns2.comcastbusiness.net. uscapitolgiftshop.gov. 28800 IN NS authns2.centurylink.net. uscapitolgiftshop.gov. 28800 IN NS ns1.aoc.gov. uscapitolgiftshop.gov. 28800 IN NS ns2.aoc.gov. uscapitolgiftshop.gov. 28800 IN RRSIG ( NS 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. gnLuPZ83eC/rlFOM9/fe/CF+kWJl06/z79QEcegcEY3MFKpRpGkKsjMBoxmRFQRAtrE92V7bzbpJ y9zQGj1w4XQjF5Cc9AB1sLDavlXSzi8GAup08XKa98X0R5/ri+lI3FvnXi5GzMp+2Ea+q74asACq rDf5XjWvUa4Q0yZf6CM= ) ;; ADDITIONAL SECTION (9 records) ns1.aoc.gov. 3600 IN A 161.197.102.14 ns2.aoc.gov. 3600 IN A 161.197.100.14 authns1.centurylink.net. 600 IN A 63.150.72.4 authns2.centurylink.net. 600 IN A 208.44.130.120 authns1.centurylink.net. 300 IN AAAA 2001:428::5 authns2.centurylink.net. 300 IN AAAA 2001:428::6 ns1.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521112853 20240517110503 48595 aoc.gov. C75GNnpd5T1SjnGs68qjETpSwr0dZxUqWd4TgvugMtx6XZ26Zj9HV3dKLiZlKZ2rtFhFouB84u+P 2BbRwPlUk96d5q5AdM9RYAyogUrt/kL64ndJlL2EfGxwZrZlOXeYainyV+6Pnoi/SZin8MeUAsnE crDkYAm0J3+lJYcwgBE= ) ns2.aoc.gov. 3600 IN RRSIG ( A 8 3 3600 20240521130600 20240517122057 48595 aoc.gov. nCIdpfvMAJHPHlX8Vbm0Ph/qep/4CM1hoUR1yJrSAaG/oUOxS3jjsspKl5B5becbZDLhU8SBvEST HFx0QgV4kxtwWv6khRe+BbWPI7zusLGbpzNz+41JOx45dzh69FJH7c7oidqn8Ljr9RhDrtr289ti F2/70m3sASIvvzNGflg= ) ;; { "EDNS-VERSION": 0 }
	uscapitolgiftshop.gov A RR has value 65.52.25.125
	Found 1 RRSIGs over A RRset
	`uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= )`
	RRSIG=40675 and DNSKEY=40675 verifies the A RRset

uscapitolgiftshop.gov

	Query to ns2.aoc.gov for uscapitolgiftshop.gov/A
	Received 247 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 247 octets ;; HEADER SECTION ;; id = 62668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.aoc.gov is authoritative for uscapitolgiftshop.gov
	Found RRSIG signed by uscapitolgiftshop.gov zone
	Query to ns2.aoc.gov for uscapitolgiftshop.gov/A
	Received 247 bytes from 161.197.100.14
	;; Response received from [161.197.100.14] 247 octets ;; HEADER SECTION ;; id = 10016 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uscapitolgiftshop.gov A RR has value 65.52.25.125
	Found 1 RRSIGs over A RRset
	`uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= )`
	RRSIG=40675 and DNSKEY=40675 verifies the A RRset

uscapitolgiftshop.gov

	Query to ns2.comcastbusiness.net for uscapitolgiftshop.gov/A
	Received 247 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 247 octets ;; HEADER SECTION ;; id = 30239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.comcastbusiness.net is authoritative for uscapitolgiftshop.gov
	Found RRSIG signed by uscapitolgiftshop.gov zone
	Query to ns2.comcastbusiness.net for uscapitolgiftshop.gov/A
	Received 247 bytes from 68.87.85.132
	;; Response received from [68.87.85.132] 247 octets ;; HEADER SECTION ;; id = 61488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uscapitolgiftshop.gov. IN A ;; ANSWER SECTION (2 records) uscapitolgiftshop.gov. 28800 IN A 65.52.25.125 uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uscapitolgiftshop.gov A RR has value 65.52.25.125
	Found 1 RRSIGs over A RRset
	`uscapitolgiftshop.gov. 28800 IN RRSIG ( A 8 2 28800 20240522011150 20240518005916 40675 uscapitolgiftshop.gov. g/VAEjZxD9rnSvEMtFGPfaaCufAPosj7yRVyDUs+Xl0++x1XU5XQn/6JdH2+azii6IUp1O8+rG7d c0x4ggTiYfKmaVRtKOtOIBEvedqvElfkSaT9LMm31WWAQa8ibinWmAQUYOc/7DX3gXdpUhttt+QX 76AsF9RG1TsYuE/p0l0= )`
	RRSIG=40675 and DNSKEY=40675 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uscapitolgiftshop.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: